Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/70e52042-6829-39e0-991c-fd4b84cd1bb3.roa
File:                     70e52042-6829-39e0-991c-fd4b84cd1bb3.roa (raw, json)
Hash identifier:          M40VMouNTYCZdiZ5u2YvLMAzG4TrHeN1blPEp4nA2JE=
Subject key identifier:   D3:24:76:9D:C0:07:D7:F5:C9:BC:12:43:BA:C5:CA:F4:31:0B:A7:61
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DB2E6F16D662F5BE731E77E00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/70e52042-6829-39e0-991c-fd4b84cd1bb3.roa
Signing time:             Mon 25 Apr 2022 12:00:00 +0000
ROA not before:           Mon 25 Apr 2022 12:00:00 +0000
ROA not after:            Tue 31 May 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        16.181.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:b2:e6:f1:6d:66:2f:5b:e7:31:e7:7e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Apr 25 12:00:00 2022 GMT
            Not After : May 31 04:00:00 2022 GMT
        Subject: CN=5c581d53-e15b-43c4-a0a0-880f1ce7bff6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:1f:ca:8a:f4:12:ef:d5:0e:06:92:fe:f9:a7:
                    ad:d2:36:60:14:4e:62:7d:db:1e:12:1a:aa:15:f9:
                    38:77:ae:51:d1:95:d3:b4:60:74:0d:59:d2:b9:02:
                    9d:2b:0b:22:5e:94:c8:b3:81:8c:47:07:58:9b:df:
                    e0:b4:53:13:43:57:e2:76:12:74:3e:ea:35:b6:23:
                    da:f0:5a:44:85:6d:ad:fd:eb:a0:1a:df:9d:cf:01:
                    de:81:e3:7c:d5:97:43:b6:b4:6c:de:38:09:26:4b:
                    fe:cf:89:e9:b1:c2:ce:b9:7c:37:d0:8f:f6:1b:6d:
                    cc:c9:80:b5:0d:90:22:95:dd:36:b5:d3:50:9d:b2:
                    64:48:c6:30:7d:6e:8c:5c:15:10:9c:3a:04:e7:9a:
                    c3:9a:56:40:18:93:eb:3b:de:7b:c5:27:35:8a:f2:
                    a8:4c:f8:73:67:fd:b7:9a:29:db:e7:d4:60:f2:0f:
                    85:89:1c:e0:c3:80:bf:80:7a:55:e0:be:1e:75:51:
                    00:ca:65:ac:10:ab:54:c2:28:8d:1e:2d:5d:13:15:
                    56:2f:9a:e3:90:a2:4a:b6:7f:08:57:99:f0:9e:d8:
                    58:30:a4:cb:ba:a4:42:69:74:7f:b0:5d:25:f8:3c:
                    3d:37:a1:22:ae:57:b2:3a:a0:cc:9a:19:be:79:fe:
                    0b:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:24:76:9D:C0:07:D7:F5:C9:BC:12:43:BA:C5:CA:F4:31:0B:A7:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/70e52042-6829-39e0-991c-fd4b84cd1bb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.181.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:f5:fb:1c:7d:9d:f1:f6:d7:04:df:a3:59:1e:a2:09:04:ce:
         8f:55:ef:c7:45:d6:0f:fb:0b:9b:02:e6:1a:15:dd:ef:e2:f9:
         15:b7:ac:74:72:63:20:60:ca:34:32:0d:14:55:b3:19:8a:96:
         da:19:b0:09:67:8a:88:62:e6:23:43:f9:9a:d2:16:6b:45:52:
         64:f9:cf:d6:75:2c:9e:b0:c6:52:67:34:1d:ee:b8:49:2c:2d:
         81:52:68:90:99:bf:b8:ab:0b:ce:7a:f6:e0:82:98:65:30:5f:
         b6:75:1e:c0:f8:9f:b1:34:10:5b:bf:fe:9a:c1:eb:9d:24:06:
         ad:f8:86:6f:32:4b:5f:ee:ce:ea:20:02:99:ae:6e:63:99:a7:
         f7:9c:58:2d:c1:ad:d6:08:72:ea:20:38:ec:a8:32:de:f6:41:
         ac:ae:a5:eb:36:8b:a9:ae:87:1b:86:aa:5e:cd:ae:f7:70:03:
         2f:cf:0d:6c:ac:7d:2b:24:2f:1f:72:fc:95:f7:c0:cb:47:40:
         d1:9d:58:87:07:2d:4d:04:18:22:4a:48:7e:af:8d:2d:bb:b9:
         c2:ff:fb:a0:98:50:a4:1e:8d:26:8d:24:b8:ad:4e:e5:31:47:
         3b:1b:ce:d6:35:f2:f1:64:d2:8e:03:79:50:57:87:08:e1:c9:
         60:73:f7:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:15:47 2025 by rpki-client